{"id":"CVE-2017-16137","aliases":["AZL-43792","AZL-43819","AZL-44400","AZL-44772","CLSA-2026-1772928825","CLSA-2026-1773101693","CLSA-2026-1774225201","CLSA-2026-1774225208","CLSA-2026-1774225219","CLSA-2026-1776904642","CLSA-2026-1776904643","CLSA-2026-1776904644","CLSA-2026-1776904645","CLSA-2026-1784596290","CLSA-2026-1787560902","CLSA-2026-1787561993","CLSA-2026-1787562139","CLSA-2026-1787562258","CLSA-2026-1792594199","DEBIAN-CVE-2017-16137","EUVD-2018-0400","GHSA-gxpj-cx7g-858c","ROOT-APP-NPM-CVE-2017-16137","UBUNTU-CVE-2017-16137"],"status":"published","title":"Regular Expression Denial of Service in debug","description":"The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. It takes around 50k characters to block for 2 seconds making this a low severity issue.","severity":{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02832,"percentile":0.86728,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400"],"published":"2018-06-07T02:00:00Z","modified":"2026-11-05T05:36:30Z","fixes":[{"ecosystem":"npm","package":"debug","fixed_in":["2.6.9","3.1.0","3.2.7","4.3.1"],"sources":["ghsa","osv"]},{"ecosystem":"TuxCare:npm","package":"debug","fixed_in":["2.3.3-tuxcare.1","2.1.1-tuxcare.2","3.2.6-tuxcare.1","4.4.3-tuxcare.1","3.2.7-tuxcare.1","3.1.0-tuxcare.1","2.6.9-tuxcare.1","1.0.4-tuxcare.2","1.0.2-tuxcare.2","1.0.3-tuxcare.2","2.1.0-tuxcare.2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"node-debug","fixed_in":["3.1.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"node-debug","fixed_in":["3.1.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"node-debug","fixed_in":["3.1.0-1"],"sources":["osv"]},{"ecosystem":"Root:npm","package":"@rootio/debug","fixed_in":["4.1.0-root.io.1"],"sources":["osv"]},{"ecosystem":"Root:npm","package":"debug","fixed_in":["4.1.0-aikido.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"npm","package":"debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.9"}]}]},{"source":"ghsa","ecosystem":"npm","package":"debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.1.0"}]}]},{"source":"ghsa","ecosystem":"npm","package":"debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.0"},{"fixed":"3.2.7"}]}]},{"source":"ghsa","ecosystem":"npm","package":"debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.3.1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"js-jquery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"3.5.0-4"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"nodejs-nodemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.0.3-4"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"js-jquery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"3.5.0-4"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"nodejs-nodemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.0.3-5"}]}]},{"source":"osv","ecosystem":"TuxCare:npm","package":"debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.3.3-tuxcare.0"},{"fixed":"2.3.3-tuxcare.1"}]}],"versions":["2.3.3"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.1.1-tuxcare.0"},{"fixed":"2.1.1-tuxcare.2"}]}],"versions":["2.1.1","2.1.1-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.5-tuxcare.0"},{"fixed":"1.0.5-tuxcare.1"}]}],"versions":["1.0.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.6-tuxcare.0"},{"fixed":"3.2.6-tuxcare.1"}]}],"versions":["3.2.6"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2.0-tuxcare.0"},{"fixed":"2.2.0-tuxcare.1"}]}],"versions":["2.2.0"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.4.3-tuxcare.0"},{"fixed":"4.4.3-tuxcare.1"}]}],"versions":["4.4.3"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.7-tuxcare.0"},{"fixed":"3.2.7-tuxcare.1"}]}],"versions":["3.2.7"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0-tuxcare.0"},{"fixed":"3.1.0-tuxcare.1"}]}],"versions":["3.1.0"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.6.9-tuxcare.0"},{"fixed":"2.6.9-tuxcare.1"}]}],"versions":["2.6.9"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.6.4-tuxcare.0"},{"fixed":"2.6.4-tuxcare.1"}]}],"versions":["2.6.4"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.4-tuxcare.0"},{"fixed":"1.0.4-tuxcare.2"}]}],"versions":["1.0.4","1.0.4-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.2-tuxcare.0"},{"fixed":"1.0.2-tuxcare.2"}]}],"versions":["1.0.2","1.0.2-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.3-tuxcare.0"},{"fixed":"1.0.3-tuxcare.2"}]}],"versions":["1.0.3","1.0.3-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.1.0-tuxcare.0"},{"fixed":"2.1.0-tuxcare.2"}]}],"versions":["2.1.0","2.1.0-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.0-tuxcare.0"},{"fixed":"2.0.0-tuxcare.1"}]}],"versions":["2.0.0"],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"node-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"node-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"node-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-1"}]}]},{"source":"osv","ecosystem":"npm","package":"debug","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.6.9"}]}]},{"source":"osv","ecosystem":"npm","package":"debug","ranges":[{"type":"SEMVER","events":[{"introduced":"3.0.0"},{"fixed":"3.1.0"}]}]},{"source":"osv","ecosystem":"npm","package":"debug","ranges":[{"type":"SEMVER","events":[{"introduced":"3.2.0"},{"fixed":"3.2.7"}]}]},{"source":"osv","ecosystem":"npm","package":"debug","ranges":[{"type":"SEMVER","events":[{"introduced":"4.0.0"},{"fixed":"4.3.1"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"@rootio/debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-root.io.1"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-aikido.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"node-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.1.0+dfsg-2"]}],"products":[{"vendor":"debug_project","product":"debug"},{"vendor":"hackerone","product":"debug node module"}],"references":[{"url":"https://github.com/visionmedia/debug/pull/504","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://github.com/visionmedia/debug/issues/501","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://nodesecurity.io/advisories/534","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","report"]},{"url":"https://lists.apache.org/thread.html/r8ba4c628fba7181af58817d452119481adce4ba92e889c643e4c7dd3%40%3Ccommits.netbeans.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rb5ac16fad337d1f3bb7079549f97d8166d0ef3082629417c39f12d63%40%3Cnotifications.netbeans.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-16137","tags":["web","advisory"]},{"url":"https://lists.apache.org/thread.html/r8ba4c628fba7181af58817d452119481adce4ba92e889c643e4c7dd3@%3Ccommits.netbeans.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rb5ac16fad337d1f3bb7079549f97d8166d0ef3082629417c39f12d63@%3Cnotifications.netbeans.apache.org%3E","tags":["web"]},{"url":"https://github.com/debug-js/debug/issues/797","tags":["web"]},{"url":"https://github.com/debug-js/debug/commit/4e2150207c568adb9ead8f4c4528016081c88020","tags":["web"]},{"url":"https://github.com/debug-js/debug/commit/71169065b5262f9858ac78cc0b688c84a438f290","tags":["web"]},{"url":"https://github.com/debug-js/debug/commit/b6d12fdbc63b483e5c969da33ea6adc09946b5ac","tags":["web"]},{"url":"https://github.com/debug-js/debug/commit/f53962e944a87e6ca9bb622a2a12dffc22a9bb5a","tags":["web"]},{"url":"https://github.com/advisories/GHSA-gxpj-cx7g-858c"},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-16137","tags":["advisory"]},{"url":"https://github.com/visionmedia/debug","tags":["package"]},{"url":"https://ubuntu.com/security/CVE-2017-16137","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-16137","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2017-16137","description":"The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. It takes around 50k characters to block for 2 seconds making this a low severity issue.","status":"published","published":"2018-06-07T02:00:00Z","modified":"2026-10-15T15:54:18.885Z","cwes":["CWE-400"],"updated_at":"2026-11-02T14:33:21.142987Z"}],"euvd":[{"id":"EUVD-2018-0400","description":"The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. It takes around 50k characters to block for 2 seconds making this a low severity issue.","status":"published","published":"2018-06-07T02:00:00Z","modified":"2026-10-15T15:54:18Z","updated_at":"2026-11-02T17:00:12.42385Z"}],"ghsa":[{"id":"GHSA-gxpj-cx7g-858c","title":"Regular Expression Denial of Service in debug","description":"Affected versions of `debug` are vulnerable to regular expression denial of service when untrusted user input is passed into the `o` formatter. \n\nAs it takes 50,000 characters to block the event loop for 2 seconds, this issue is a low severity issue.\n\nThis was later re-introduced in version v3.2.0, and then repatched in versions 3.2.7 and 4.3.1.\n\n## Recommendation\n\nVersion 2.x.x: Update to version 2.6.9 or later.\nVersion 3.1.x: Update to version 3.1.0 or later.\nVersion 3.2.x: Update to version 3.2.7 or later.\nVersion 4.x.x: Update to version 4.3.1 or later.","status":"published","published":"2018-08-09T20:18:07Z","modified":"2024-03-25T19:01:24Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:37:41.821668Z"}],"nvd":[{"id":"CVE-2017-16137","description":"The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. It takes around 50k characters to block for 2 seconds making this a low severity issue.","status":"published","published":"2018-06-07T02:29:03.817Z","modified":"2026-10-15T16:17:27.25Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:04:17.638656Z"}],"osv":[{"id":"AZL-43792","title":"CVE-2017-16137 affecting package js-jquery 3.5.0-4","description":"The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. It takes around 50k characters to block for 2 seconds making this a low severity issue.","status":"published","published":"2018-06-07T02:29:03Z","modified":"2026-04-21T04:31:09.509903Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:28:05.284713Z"},{"id":"AZL-43819","title":"CVE-2017-16137 affecting package nodejs-nodemon 2.0.3-4","description":"The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. It takes around 50k characters to block for 2 seconds making this a low severity issue.","status":"published","published":"2018-06-07T02:29:03Z","modified":"2026-04-21T04:31:10.23198Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:28:05.284713Z"},{"id":"AZL-44400","title":"CVE-2017-16137 affecting package js-jquery 3.5.0-4","description":"The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. It takes around 50k characters to block for 2 seconds making this a low severity issue.","status":"published","published":"2018-06-07T02:29:03Z","modified":"2026-11-05T05:36:30Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-05T16:41:20.107976Z"},{"id":"AZL-44772","title":"CVE-2017-16137 affecting package nodejs-nodemon 2.0.3-5","description":"The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. It takes around 50k characters to block for 2 seconds making this a low severity issue.","status":"published","published":"2018-06-07T02:29:03Z","modified":"2026-11-05T05:36:30Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-05T16:41:20.107976Z"},{"id":"CVE-2017-16137","description":"The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. It takes around 50k characters to block for 2 seconds making this a low severity issue.","status":"published","published":"2018-06-07T02:29:03.817Z","modified":"2026-10-20T10:48:16.446900955Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:44:04.853379Z"},{"id":"DEBIAN-CVE-2017-16137","description":"The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. It takes around 50k characters to block for 2 seconds making this a low severity issue.","status":"published","published":"2018-06-07T02:29:03.817Z","modified":"2026-10-15T19:47:38.602778651Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:45:28.801885Z"},{"id":"GHSA-gxpj-cx7g-858c","title":"Regular Expression Denial of Service in debug","description":"Affected versions of `debug` are vulnerable to regular expression denial of service when untrusted user input is passed into the `o` formatter. \n\nAs it takes 50,000 characters to block the event loop for 2 seconds, this issue is a low severity issue.\n\nThis was later re-introduced in version v3.2.0, and then repatched in versions 3.2.7 and 4.3.1.\n\n## Recommendation\n\nVersion 2.x.x: Update to version 2.6.9 or later.\nVersion 3.1.x: Update to version 3.1.0 or later.\nVersion 3.2.x: Update to version 3.2.7 or later.\nVersion 4.x.x: Update to version 4.3.1 or later.","status":"published","published":"2018-08-09T20:18:07Z","modified":"2026-09-10T03:47:07.070123052Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:46:48.546324Z"},{"id":"UBUNTU-CVE-2017-16137","description":"The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. It takes around 50k characters to block for 2 seconds making this a low severity issue.","status":"published","published":"2018-06-07T02:29:00Z","modified":"2025-10-24T04:46:34Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:54:14.563448Z"},{"id":"CLSA-2026-1772928825","title":"TuxCare security update for debug (1 CVE)","description":"TuxCare rebuilt debug to address 1 CVE. Fixed in 2.3.3-tuxcare.1.","status":"published","published":"2026-08-04T14:52:10Z","modified":"2026-10-15T09:45:25.569469622Z","updated_at":"2026-11-02T15:43:43.249928Z"},{"id":"CLSA-2026-1773101693","title":"TuxCare security update for debug (1 CVE)","description":"TuxCare rebuilt debug to address 1 CVE. Fixed in 2.1.1-tuxcare.2.","status":"published","published":"2026-08-04T14:52:11Z","modified":"2026-10-15T09:45:26.582845957Z","updated_at":"2026-11-02T15:43:43.249928Z"},{"id":"CLSA-2026-1774225201","title":"TuxCare security update for debug (2 CVEs)","description":"TuxCare rebuilt debug to address 2 CVEs. Fixed in 1.0.5-tuxcare.1.","status":"published","published":"2026-08-04T14:52:14Z","modified":"2026-10-15T09:47:01.226421837Z","updated_at":"2026-11-02T15:43:43.621843Z"},{"id":"CLSA-2026-1774225208","title":"TuxCare security update for debug (1 CVE)","description":"TuxCare rebuilt debug to address 1 CVE. Fixed in 3.2.6-tuxcare.1.","status":"published","published":"2026-08-04T14:52:14Z","modified":"2026-10-15T09:47:47.27241563Z","updated_at":"2026-11-02T15:43:43.621843Z"},{"id":"CLSA-2026-1774225219","title":"TuxCare security update for debug (2 CVEs)","description":"TuxCare rebuilt debug to address 2 CVEs. Fixed in 2.2.0-tuxcare.1.","status":"published","published":"2026-08-04T14:52:14Z","modified":"2026-10-15T09:47:48.079400259Z","updated_at":"2026-11-02T15:43:43.621843Z"},{"id":"CLSA-2026-1776904642","title":"TuxCare security update for debug (1 CVE)","description":"TuxCare rebuilt debug to address 1 CVE. Fixed in 4.4.3-tuxcare.1.","status":"published","published":"2026-08-04T14:52:28Z","modified":"2026-10-15T09:47:50.143601851Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"CLSA-2026-1776904643","title":"TuxCare security update for debug (1 CVE)","description":"TuxCare rebuilt debug to address 1 CVE. Fixed in 3.2.7-tuxcare.1.","status":"published","published":"2026-08-04T14:52:28Z","modified":"2026-10-15T09:47:50.070552442Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"CLSA-2026-1776904644","title":"TuxCare security update for debug (1 CVE)","description":"TuxCare rebuilt debug to address 1 CVE. Fixed in 3.1.0-tuxcare.1.","status":"published","published":"2026-08-04T14:52:28Z","modified":"2026-10-15T09:47:50.00368285Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"CLSA-2026-1776904645","title":"TuxCare security update for debug (1 CVE)","description":"TuxCare rebuilt debug to address 1 CVE. Fixed in 2.6.9-tuxcare.1.","status":"published","published":"2026-08-04T14:52:28Z","modified":"2026-10-15T09:47:50.02796459Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"CLSA-2026-1784596290","title":"TuxCare security update for debug (2 CVEs)","description":"TuxCare rebuilt debug to address 2 CVEs. Fixed in 2.6.4-tuxcare.1.","status":"published","published":"2026-08-04T14:52:45Z","modified":"2026-10-25T19:28:10.65938667Z","updated_at":"2026-11-02T15:43:46.482572Z"},{"id":"CLSA-2026-1787560902","title":"TuxCare security update for debug (1 CVE)","description":"TuxCare rebuilt debug to address 1 CVE. Fixed in 1.0.4-tuxcare.2.","status":"published","published":"2026-08-24T08:41:42Z","modified":"2026-10-15T09:45:32.989495875Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"CLSA-2026-1787561993","title":"TuxCare security update for debug (1 CVE)","description":"TuxCare rebuilt debug to address 1 CVE. Fixed in 1.0.2-tuxcare.2.","status":"published","published":"2026-08-24T08:59:53Z","modified":"2026-10-15T09:46:45.664888359Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"CLSA-2026-1787562139","title":"TuxCare security update for debug (1 CVE)","description":"TuxCare rebuilt debug to address 1 CVE. Fixed in 1.0.3-tuxcare.2.","status":"published","published":"2026-08-24T09:02:19Z","modified":"2026-10-15T09:45:32.2858308Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"CLSA-2026-1787562258","title":"TuxCare security update for debug (1 CVE)","description":"TuxCare rebuilt debug to address 1 CVE. Fixed in 2.1.0-tuxcare.2.","status":"published","published":"2026-08-24T09:04:18Z","modified":"2026-10-15T09:45:32.22679938Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"CLSA-2026-1792594199","title":"TuxCare security update for debug (2 CVEs)","description":"TuxCare rebuilt debug to address 2 CVEs. Fixed in 2.0.0-tuxcare.1.","status":"published","published":"2026-10-21T14:49:59Z","modified":"2026-10-21T20:31:56.552134653Z","updated_at":"2026-11-02T15:43:54.672859Z"},{"id":"ROOT-APP-NPM-CVE-2017-16137","title":"CVE-2017-16137 in @rootio/debug - Patched by Root","description":"Root has patched CVE-2017-16137 in the @rootio/debug package for Root:npm. Multiple fixed versions available.","status":"published","published":"2026-07-09T11:39:56Z","modified":"2026-07-09T14:00:29.784193891Z","updated_at":"2026-11-02T15:53:27.362922Z"}]}}